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1.Which two statements are correct about Aup Track? (Choose two) 

A. AppTrack can only be configured in the main logical system on an SRX Series device 

B. AppTrack identifies and blocks traffic flows that might be malicious regardless of the ports being used 
C. AppTrack collects traffic flow information including byte, packet and duration statistics: 

D. AppTrack can be configured for any defined logical system on an SRX Series device 

Answer:C 


2. Which two sources are used by Juniper Identity Management Service (JIMS) for collecting username 
and device IP address (Choose two.) 

A. DNS 

B. Microsoft Exchange Server event logs 

C. OpenLDAP service ports 

D. Active Directory domain controller event logs 

Answer:DC 


3.Click the Exhibit button. 


a LA 
The security cettificate presented: by this website was not issued by a trusted certificate authority. = 


Security certificate problems mayiindicate an attempt to fool you or intercept any data you send to the: 


server, 


We recommend that you ciose this webpage and do not continue to this website: 
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You have implemented SSL client protection proxy. Employees are receiving the error shown in the 
exhibit. 

How do you solve this problem? 

A. Reboot the SRX Series device 

B. Import the existing certificate to each client device 

C. Install a new SRX Series device to act as the client proxy 

D. Load a known good, but expired CA certificate onto the SRX Series device. 

Answer:B 


4. Which two statements are correct about SSL proxy server protection? (Choose two) 

A. You do not need to configure the servers to use the SSL proxy function on the SRX Series device. 
B. You must load the server certificates on the SRX Series device. 

C. The servers must be configured to use the SSL proxy function on the SRX Series device 

D. You must import the root CA on the servers 

Answer:DC 
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5.You are troubleshooting unexpected issues on your JIMS server due to out of order event log 
timestamps. 

Which action should you take to solve this issue? 

A. Enable time synchronization on the domain controllers. 

B. Enable times synchronization on the JIMS server. 

C. Enable time synchronization on the SRX Series devices 

D. Enable time synchronization on the client devices 

Answer:A 


6. On an SRX Series firewall, what are two ways that Encrypted Traffic Tosights assess the threat of the 
traffic? (Choose two) 

A. it decrypts the data to validate the nash 

B. ,it reviews the timing and frequency of the connections. 

C. It validates the certificates used. 

D. It decrypts the file in a sandbox. 

Answer:AB 


7.Which two statements are true about the fab interface in a chassis cluster? (Choose two.) 
A. The Junos OS supports only one fab link. 

B. The fab link does not support fragmentation 

C. The fab link supports traditional interface features 

D. The physical interface for the fab link must be specified in the configuration. 

Answer:BD 


8. What are two types of system logs that Junos generates? (Choose two.) 
A. system core dump files 

B. control plane-logs 

C. data plane logs 

D. SQL log files 

Answer: BC 


